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Foreword 

This translation has been made based on the original Japanese 
Industrial Standard established by the Minister of Health, Labour and 
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the Japan Machinery Federation (JMF) with a draft being attached, 
based on the provision of Article 12 Clause 1 of the Industrial 
Standardization Law. 

This JIS document is protected by the Copyiight Law\ 

Attention is drawn to the possibility that some parts of this Standard 
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to the public, utility model right or application for registration of utility 
model after opening to the public w^hich have technical properties. The 
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for registration of utility model after opening to the public which have 
the said technical properties. 
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JAPANESE INDUSTRIAL STANDARD B 9710 t 2006 (ISO 14119 : 1098) 



Safety of macliiiiery — 

Interlocking devices associated with guards ^ — 

Principles for design and selection 



Introduction 

This Japanese Industrial Standard has been prepared based on the first edition of 
ISO 14119 published in 1998 without modifying the technical contents. 



1 Scope 

This Standard specifies principles for the design and selection, independent of the 
nature of the energy source, of interlocking devices associated with guards (as de- 
fined in 3.26.1 of JIS B 9700-1:2004 and 3.25.5 of JIS B 9700-1:2004). 

It also provides requirements specifically intended for electrical interlocking de- 
vices. 

This Standards covers the parts of guards which actuate interlocking devices. 

NOTE 1 Requirements for guards are given in JIS B 9716. The processing of 
the signal from the interlocking device to stop and immobilize the 
machine is dealt with in JIS B 9705-1, 

2 The International Standard corresponding to this Standard is as fol- 
lows. 

ISO 14119:1998 Safety of machinery — Interlocking devices associ- 
ated with guards — Principles for design and selection (IDT) 

In addition, symbols which denote the degi^ee of correspondence in 
the contents between the relevant International Standard and JIS 
are IDT (identical), MOD (modified), and NEQ (not equivalent) 
according (not equivalent) according to ISO/IEC Guide 21. 

2 Normative references 

The following standards contain provisions which, through reference in this text, 
constitute the provisions of this Standard. 

If the indication of the year is given to the referred standard, the edition of 
indicated year applies but the revision (including amendments) made thereafter does 
not apply. 

JIS B 9700-1:2004 Safety of machinery — Basic concepts, general principles for 
design — Part 1: Basic terminology, methodology 

NOTE: Corresponding International Standard: ISO 12100-1:2003 Safety of 
machinery — Basic concepts, general principles for design — Part 1: 
Basic terminology, methodology (IDT) 
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JIS B 9700-2:2004 Safety of machinery — Basic concepts, general principles for 
design — Pai^t 2: Technical principles 

NOTE: Corresponding International Standard: ISO 12100-2:2003 Safety of 
incichinery — Basic concepts, general principles for design — Part 2: 
Technical principles (IDT) 

JIS B 9702:2000 Safety of machinery — Principles of risk assessment 

NOTE: Corresponding International Standard: ISO 14121:1999 Safety of ma- 
chinery — Principles of risk assessment (IDT) 

JIS B 9705-1:2000 Safety of machinery — Safety -related parts of control systems 
— Part 1: General principles for design 

NOTE: Corresponding International Standard: ISO 13849-1:1999 Safety of ma- 
chinery — - Safety -related parts of control systems — Part 1: General 
principles for design (IDT) 

JIS B 9707:2002 Safety of machinery — Safety distances to prevent danger zones 
being reached by the upper limbs 

NOTE: Corresponding International Standard: ISO 13852:1996 Safety of ma- 
chinery — Safety distances to prevent clanger zones being reached by 
the upper limbs (IDT) 

JIS B 9714:2006 Safety of Jnachinery — Prevention of unexpected star-up 

NOTE: Corresponding International Standard: ISO 14118:2000 Safety of ma- 
chinery — Prevention of unexpected start-up (IDT) 

JIS B 9715:2006 Safety of machinery — Positioning of protective equipment with 
respect to the approach speeds of parts of the human body 

NOTE: Corresponding International Standard: ISO 13855:2002 Safety of ma- 
chinery — Positioning of protective equipment with respect to the ap- 
proach speeds of parts of the human body (IDT) 

JIS B 9716:2006 Safety of machinery — Guards — General requirements for the 
design and construction of fixed and movable guards 

NOTE: Corresponding International Standard: ISO 14120:2002 Safety of ma- 
chinery — Guards — General requirements for the design and construc- 
tion of fixed and movable guards (IDT) 

JIS B 9960-1:1999 Safety of machinery — Electrical equipment of machines — 
Part 1: General requirements 

NOTE: Corresponding International Standard: lEC 60204-1:1997 Safety of ma- 
chinery — Electrical equipment of machines — Part 1: General require- 
ments (MOD) 

JIS C 8201-5"1:1999 Low-voltage switchgear and controlgear — Part 5-1: Con- 
trol circuit devices and switching elements — Electrome- 
chanical control circuit devices 

NOTE: Corresponding International Standard: TEC 60947-5-1:1997 Low-volt- 
age switchgear and controlgear — Part 5-1: Control circuit devices and 
switching elements — Electromechanical control circuit devices (MOD) 
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3 Terms and definitions 

For the purpose of this Standard^ the following definitions apply: 

3.1 interlocking device; interlock 

mechanical, electrical or other type of device, the purpose of which is to prevent 
the operation of machine elements under specified conditions (generally as long as a 
guard is not closed) (see JIS B 9700-1:2004, 3,26*1) 

3.2 interlocking guard 

guard associated with an interlocking device, so that: 

a) the hazardous machine functions ''covered" by the guard cannot operate until the 
guard is closed; 

b) if the guard is opened while the hazardous machine functions are operating, a 
stop instruction is given; 

c) when the guard is closed, the hazardous machine functions "covered" by the 
guard can operate, but the closure of the guard does not by itself initiate their 
operation. 

(see JIS B 9700-1:2004, 3,25.4) 

3.3 interlocking guard with guard locking 

guard associated with an interlocking device and a guard locking device so that: 

a) the hazardous machine functions ''covered'' by the guard cannot operate until the 
guard is closed and locked; 

b) the guard remains closed and locked until the risk of injury from the hazardous 
machine functions has passed; 

c) when the guard is closed and locked, the hazardous machine functions "covered" 
by the guard can operate, but the closure and locking of the guard do not by 
themselves initiate their operation. 

(see JIS B 9700-1:2004, 3,25.5) 

3.4 guard locking device 

device intended to lock a guard in the closed position and linked to the control 
system so that: 

a) the machine cannot operate until the guard is closed and locked; 

b) the guard remains locked until the risk has passed. 

3.5 automatic monitoring 

a back-up safety function which ensures that a safety measure is initiated if the 
ability of a component or an element to perform its function is diminished, or if the 
process conditions are changed in such a way that hazards are generated 

NOTE : There are two categories of automatic monitoring: 

a) "continuous" automatic monitoring, whereby a safety measure is 
immediately initiated when a failure occurs; 

b) "discontinuous" automatic monitoring, whereby a safety measure 
is initiated during a following machine cycle, if a failure has 
occurred. 



PROTECTED BY COPYRIGHT 



4 

B 9710 : 2006 (ISO 14119 : 1998) 

3.6 positive mode actuation 

if a moving mechanical component inevitably moves another component along 
with it, either by direct contact or via rigid elements, the second component is said to 
be actuated in the positive mode (or positively) by the first one 

(based on JIS B 9700-2) 

3.7 positive opening operation of a contact element 

the achievement of contact separation as the direct result of a specified movement 
of the switch actuator through non-resilient members (e.g. not dependent upon springs) 

NOTE : For fluid power, the equivalent concept may be called ^^positive mode 
interruption". 

(based on JIS C S201"5=-l) 

3.8 stopping time; time for hazard elimination 

the period between the point at which the interlocking device initiates the stop 
command and the point at which the risk from hazardous machine functions has 
passed 

3.9 access time; time for access to a danger zone 

the time taken to access the hazardous machine parts after initiation of the stop 
command by the interlocking device, as calculated on the basis of an approach speed 
whose value may be chosen, for each particular case, taking into account the param- 
eters given in JIS B 9715 



4 Operating principles and typical forms of interlocking devices associ- 
ated with guards 

NOTE : Reference is made to the relevant Annexes where it is considered use- 
ful for clearer understanding. 

4.1 Interlocking principles 

4.1.1 Control interlocking 

The stop command from the interlocking device is introduced into the control 
system so that interruption of the energy supply to the machine actuators — or 
mechanical disconnection of moving parts from the machine actuators — is triggered 
by the control system (indirect interruption: levels A and B in figure 1). 

4.1.2 Power interlocking 

The stop command from the interlocking device directly interrupts the energy 
supply to the machine actuators or disconnects moving parts from the machine ac- 
tuators (level C in figure 1). "Directly'' means that, unlike control interlocking (see 
4,1.1), the control system does not pla}^ any intermediate role in the interlocking 
function. 



PKOTECTED BY COPYRIGHT 



B 9710 : 2006 (ISO 14119 : 1998) 



ft 

o 



Signalling, 

display, 

warning 



Manual control 
(actuators) 



Control defaces 



1 



Inputs 

Data storage and logic or analog data processing 

Outputs 



Safety dexdces 

In this Standard: 

electrical, pneumatic, bydranlic 

interlocking devices 



Guards 



Different possible 
levels for the input 
of mai ntained stop 
commands 



Level A ^^ 

(in this Standard: 

control interlocking) 



Power control elements 
(contactors, valves, 
speed controllers, etc.) 



Machine actuators 
(engines, cylinders) 



Mechanical 
interlocking 



Disconnecting means 
(e.g. clutches), brakes 



Level B ^' 

(in this Standard: 

control interlocking) 



Level C '^'^ 

(in this Standard: 

power interlocking) 



Power transmission elements 
Working parts 



Mechanical link 

Stop commands generated by the interlocking devices 

Power supply to the machine actuators 

Scope of this Standard 



Note ^' In accordance with JIS B 9714 : 2006 

Figure 1 Location of interlocking devices in machinery 

4,2 Typical forms of interlocking devices 

4,2,1 Interlocking device (without guard locking) [see table 1 and figure 3 a)] 

It is alwa^^s possible to open the guard. As soon as the guard is not longer closed, 
the interlocking device generates a stop command. As it is possible to start opening 
the guard during operation of the machine (or of the hazardous machine elements), 
the function is that of an interlocking device, as defined in 3.25.4 of JIS B 
9700-1:2004. 



PROTECTED BY COPYRIGHT 



B 9710 : 2006 (ISO 14119 : 1998) 



Examples of interlocking devices without guard locking are shown in Annexes A, 
B. F, G, J, K and L. 



' ? -^ J '^ J ^ J 



4,2.2 Interlocking device with guard locking [see table 1 to figure 3 b)] 

The guard is held closed by a guard locking device (see 3.4). There are two types 
of device: 

~ those where unlocking the guard can be initiated at any time by the operator 
[unconditional unlocking: see table 1 and figure 3 bl)]; 

- those where unlocking the guard is possible only if a condition is fulfilled, thus 
ensuring that the hazard has disappeared [conditional unlocking: see table 1 and 
figure 3 b2)]. 

The guard locking device (see 3.4) can be an integral part of an interlocking 
device, or a separate unit. 

In a guard locking device, the part which is intended to lock/unlock the guard can 
be 

- manually applied, manually released (see figure N.l in Annex N) 

- spring-applied, power-released [see figure 2 a)]; 

- power-applied, spring-released [see figure 2 b)]; 

~ power-applied, powder-released [see figure 2 c)]. 

Examples of interlocking devices with guard locking are given in Annexes C, D, E, 
H, M and N. 



a) spring-applied ... 



... power-released 




^ 




^^ 



h) power- applied ... 



. spring-released 




Ji 



>S^ 



c) power- applied ... 



. power-released 





Figure 2 Operating modes of the guard locking device 

in power-actuated guard locking devices 
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a) Interlocking devices without guard locking ("two-state interlocking^^) 



Locking 
achieved 



Guard closed and locked: 
unlocking possible 



Unlocking achieved 



Machine 
operation ^ 
possible 



End of 

guard 

closing 



Guard closed and unlocked: 
opening of the guard possible 



Unlocking 
made 
Y impossible 



Begining of guard opening 



3 - 



Guard open 



Guard closed and locked: 
unlocking impossible 



Hazard disappearance (e.g. machine 
• brought to rest) detected or ensured 
by fixed time having elapsed 



Locking , 
achieved 



Machine 
operation / 

impossible 



Guard closed and locked: 
unlocking possible 



— Unlocking achieved 



Guard closed and 
unlocked; opening of the 
guard possible 



End of 

guard - . Beginning of guard opening 

closing 



Guard open 



Note ^' "Unlocking achieved" implies that: 

- a stop command has been initiated simultaneously with, and as a conse- 
quence of, the beginning of the actuation of the unlocking device; 

- the time necessary for the guard to be unlocked is greater than the time 
necessary for the hazard to disappear. 



bl) Unconditional unlocking 

("three-state interlocking") 



b2) Conditional unlocking 

(**four-state interlocking") 



b) Interlocking devices with guard locking 

Figure 3 Functional diagrams of the different types 
of interlocking devices 



PROTECTED BY COPYRIGHT 



B 9710 : 2006 (ISO 14119 : 1998) 



Table 1 Various aspects of the interlocking devices 
with and without guard locking 



Interlocking devices without guard locking 

[see 4.2.1 and figure 3 aj] 



Interlocking devices with guard locking 
[see 4.2.2 and figure 3 b)] 



U n c ondition Xil 
unlocking 

[see figure 3bl)] 

- Unlocking the g'uard can 
be started at any time by 
the operator, but the time 
necessary for the guard to 
be unlocked is long-er than 
the time necessary for the 
hazard to disappear 



Conditional unlocking 

[see figure 3b2)] 

Unlocking the guard is made possible only if 
(or is triggered when) one of the following 
conditions is fulfilled: 



- a fixed time ^^' has 
elapsed 
after the stop 
command has been 
gWen: 



~ disappearance of 
the hazard has 
been detected 
(e.g. zero-speed 
detection). 



Stop command given: 

- at the beginning of 
the guard opening 
stroke (the interlocking 
device is actuated by 
the guard itself): 



- simultaneously with 
the beginning of the 
actuation of the lock '^^ 
and as a consequence 
ofit: 



- shortly after the beginning 
of the actuation of the guard 
locking device and as a 
consequence of it: 



- by the operation, or 
automation ally by the control 
system, then memorized by 
the interlocking device. 




1 




(see Annexes A and G) 



fc=^ 



(see Annex D.) 




I see Annex N) 



(see Annex M) 



IVpical examples 



Notes ^- Strictly speaking, the guard is unlocked after the begiiming of the stop command. Where the hazard disappears 
"as soon as the stop command is given" (in any case before the guard is unlocked), the function ensured is 
equivalent to that of an interlocking guard with guard locking. 

'-"" Longer than the time necessary for the hazard to disappear, 
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4.3 Technological forms of interlocking device 

Interlocking techniques involve a broad spectrum of technological aspects. As 
such, interlocking devices can be classified using a great variety of criteria, e.g, the 
nature of the link between guard and circuit-opening elements, or the technological 
type (electromechanical, pneumatic, electronic, etc.) of the circuit-opening elements. 

Table 2 establishes the link between the main technological forms of interlocking 
device and the elements of this Standard which deal with them. 



Table 2 Technological forms of interlocking device 



Technological forms 


Provisions in subclauses 


Examples in annexes 


Interlocking devices with 
mechanically actuated detectors : 

- with cam-operated detectors 

- with tongue-operated detectors 


5.1 to 5.4, 5.7.2, 6.2 

5.7.2.1 
5.7.2.2 


A, G, L, M 
B 


Interlocking devices with 
non-mechanically actuated detectors : 

- with magnetically actuated switches 

- with electronic proximity switches 


5.7.3 to 6.3 
5.7.3 to 6.3 


J 
K 


83^8 tems incorporating keys : 

- captive-key systems; 

- trapped -key systems. 




D 

E 


Plug and socket systems 


5.7.4 


F 


Mechanical interlocking between guard 
and movable parts 




H 



5 Provisions for the design of interlocking devices (independent of the 

nature of the energy source) 

5.1 Actuation modes of mechanically actuated position detectors 

When a single detector is used to generate a stop command, it shall be actuated in 
the positive mode (see table 3 and 3S), Non-positive mode actuation is only allowed 
in conjunction with a detector with positive mode actuation, notably to avoid com- 
mon-cause failures (see 5.4.1). The design of the actuator should be as simple as 
possible, since this may reduce the probability of failure. 
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Table 3 Actuation of position detectors in the positive 
mode and in the non-positive mode 



Mode of 
actuation 


Guard closed 


Guard open 


Working mode 


Positive 




1 
1 

1 


^ 


} 


> 


The detector stem (actuator) is 
held depressed by a cam. as long- 
as the guard is open. 

When the guard is closed, the 
detector changes its state as the 
result of the action of a return 
spring. 








Ky 










w 






J L 






"i r 






i 








S 




Non-positive 
mode 


( 


V 

i 

! 
1 


^ 


I) 


The detector stem (actuator) is 
held depressed by a cam as long 
as the guard is closed. 
When the guard is opened, the 
detector changes its state as the 
result of the action of a return 
spring. 
















o 

! 
1 

1 






J u 












* 






* 





5*2 Arrangement and fastening of position detectors 

5,2,1 Position detectors shall be arranged so that the^^ are sufficiently protected 
against a change of their position. In order to meet this requirement: 

a) the fasteners of the position detectors shall be reliable and loosening them shall 
required a tool; 

the use of slots shall be limited to initial adjustment; 



b) 
c) 



provisions shall be made for positive location after adjustment (e.g. by means of 
pins or dowels). 

Replacement of the detectors shall be possible without any readjusting need. 
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5.2,2 In addition, the following requirements shall be met: 

a) self-loosening or easy defeat of the detector and of its actuator shall be prevented; 

b) the support for position detectors shall be sufficiently rigid to maintain correct 
operation of the position detector; 

c) the movement produced by mechanical actuation shall remain within the specified 
operating range of the position detector to ensure correct operation and/or 
prevent overtravel; 

d) displacement of the guard before the position detector changes its state shall not 
be sufficient to impair the protective effect of the guard (for access to danger 
zones, see JIS B 9707 and JIS B 9716); 

e) the position detectors shall not be used as mechanical stops; 

f) the position detectors shall be located and, if necessary, protected so that 
damage from foreseeable external causes is avoided; 

g) easy access to position detectors for maintenance and checking for correct 
operation shall be ensured, 

5.3 Arrangement and fastening of cams 

Rotary and linear cams for mechanically actuating position detectors shall be 
designed so that: 

- they are positively located, and fixed by fasteners requiring a tool for loosening 
them; 

- their self-loosening is prevented; 

- they can only be mounted in a correct position; 

- they do not damage the position detector or impair its durability. 

NOTE : These provisions exclude friction assemblies. 

5.4 Reducing the possibility of conimon-cause failures 

When switching elements have been made redundant, common-cause failures shall 
be avoided, e.g. by use of the measures described in 5,4,1 and/or in 5.4.2. 

5.4.1 Positive and non-positive m^ode association of mechanically actuated 
position detectors (see 5.1) 

Typical causes for failure of mechanically actuated position detectors are: 

a) excessive wear of the actuator (e.g. plunger or roller) or of the cam attached to 
the guard; misalignment betw^een cam and actuator; 

b) jamming of the actuator (plunger) making actuation by the spring impossible. 

Detectors actuated in the positive mode, as D] (se figure 4), fail to danger in case 
a), but not in case b). 

Detectors actuated in the non-positive mode, as D^ (see figure 4), fail to danger in 
case b), but not in case a). 

Thus, in the case of a failure of D] or D2, breaking of the circuit is ensured by the 
other detector. 
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Figure 4 Avoiding coHimon-cause failure of two mechanically 
actuated position detectors by using associated 
positive and non-positive mode actuation 



5,4.2 Power m.ediuin diversity 

In order to minimize the probability of common-cause failure, two independent 
interlocking devices^ each of which interrupts the supply from a different energy 
source, may be associated with a guard (see example given in figure L,3). 

5,5 Guard locking device (see 3.4 and 4.2.2) 

Guard locking shall result from the engagement of two rigid parts (positive loca- 
tion). 

The part [bolt] intended to lock the guard shall be "spring-applied — power- 
released" [see figure 2 a)]. 

Other systems [e.g. figure 2 b), 2 c)] may be used if, in a specific application, they 
provide an equivalent level of safety. 

For *'spring-applied — power-released" systems [see figure 2 a)], a manual unlock- 
ing device requiring operation by a tool shall be provided. Any type C standard 
specifying such a guard lock should also specify the characteristics of the manual 
unlocking device. 

The position of the bolt shall be monitored (e.g. by a detector actuated in the 
positive mode), so that the machine cannot be started until the bolt is in the fully 
engaged position (see Annex M). 

The bolt shall be able to withstand the forces which are to be expected during 
normal operation of the guard. The force which the bolt is able to withstand without 
damage affecting further use shall be indicated either on the guard locking device 
itself or in the manufacturer's instructions supplied with the device. 

NOTE : Guard locking devices can be used e.g. to prevent an enclosure around 
an automatic unit being opened before the machine/process has reached 
a definite state, thus preventing loss of information or material dam- 
age. 
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5.6 Delay devices 

When a delay device [timer] is used, a failure in this device shall not decrease the 
delay. 

5.7 Design to minimize defeat possibilities 

5.7.1 General 

Interlocking devices shall be designed and instructions for their installation and 
maintenance shall be given so that they cannot be defeated in a simple manner. 

NOTE : "Defeat in a simple manner'' means "intended operation is achieved 
manually or with a readily available object". Readily available objects 
may be: 

- screws, needles, sheet-metal pieces; 

- objects in daily use such as keys, coins, tools required by the 
intended use of the machine. 

Provisions by which defeat may be made more difficult include; 

a) provisions expressed in 5.2.2; 

b) the use of interlocking devices or systems which are coded, e.g. mechanically, 
electrically J magnetically or optically; 

c) physical obstruction or shielding preventing access to the interlocking device 
while the guard is open [see examples in figures 5, 6 and figure F.2, variant b)]. 

Where interlocking systems rely on special actuators or keys (coded or not), advice 
should be given in the instruction handbook concerning risks associated with the 
availability of spare actuators or keys and master ke^^s. 

5.7.2 Design to minimize defeat of mechanically actuated position detectors 

5.7.2.1 Cam-operated position detectors 

When a single detector is used, it shall be actuated in the positive mode {see 5.1) 
since, among other characteristics, this mode of actuation prevents the detector from 
being defeated in a simple manner. 

NOTE : A higher level of protection against defeat can be achieved, e.g., by 
enclosing the cam and detector in the same housing. 

5.7.2.2 Tongtie-operated switches 

As the dependability of the switch relies heavily upon the design of the tongue 
and mechanism, the switch shall incorporate a system or systems to render it diffi- 
cult to defeat by simple tools such as pliers, screwdrivers, wire, etc. 

A higher level of protection against defeat can be achieved by e,g. : 

~ physical obstruction or shielding which prevents introduction of spare actuators 
(see figure 5); 

- permanent assembly (e.g. by wielding, riveting, "one-way" screw) of the tongue 
with the guard to render dismantling more difficult. 
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Key: 



Switch 
Tongue 
Cover 
Fixed part 





Figure 5 Example of protection against defeat 
of a tongue-operated switch 



5,7,3 Design to minimize defeat of proximity switches and magnetic switches 

Proximity switches and magnetic switches, which rely solely on the presence or 
absence of detectable material or of a magnet for their actuation, can easily be 
defeated. Therefore, their method of mounting shall give protection against defeat 
(see figure 6). 

NOTE : See also 6.3A and reference [1], Annex P. 

Where there is a risk of a substitute actuator being used to defeat the system, an 
obstruction should be incorporated into the mechanical arrangement to prevent the 
substitute actuator being used to actuate the switch (see figure 6). 



(Contact open 
when guard 
detected) 



/ 



Detector Guard open Open 



Closed 



Guard closed 

a) Sliding guard 



- Non-detetable part 
Detector 





(Contact open 

when guard detected) 



*— Detectable part 



b) Rotating guard 



NOTE : Defeating the detector is made difficult by the presence of the guard in 
front of it. 

Figure 6 Examples of protection against defeat of 
a proximity switch or magnetic switch 
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5.7.4 Design to miniiiiize defeat of plug and socket interlocking devices 
Protection against defeat can be achieved : 

- by locating the socket so that access to it is prevented when the guard is open [see 
example in figure F.2 variant b)] ; 

~ by using a multi-pin plug and socket system the wiring of which, being hidden, 
makes it difficult to restore the continuity of the circuit [see example in figure F.l, 
variant a)] ; 

- by using a plug and a socket system, specifically designed for every particular 
application^ or the spare parts of which are not readily available. 

NOTE : The wiring shown in figures F.l and F.2 (designated the "ring circuit") 
makes it necessary to use an additional wire with a plug and a socket 
at its ends in order to restore the continuity of the circuit when the 
guard is open; this contributes to preventing defeat. 

5.8 Environmental considerations 

The selection of an interlocking device and/or of its components shall take into 
consideration the environment (e.g. temperature) in which they are intended to be 
used (see 4.12.1 of JIS B 9700-2:2004 and JIS B 9705-1), 



6 Additional technical requirements for electrical interlocking devices 

6.1 Compliance with JIS B 9960-1:1999 

Electrical interlocking devices shall comply with JIS B 9960-1:1999 with particu- 
lar reference to : 

- 12.3 of JIS B 9960-1:1999 for protection against ingress of solids and liquids ; 

- 10.1.4 of JIS B 9960-1:1999 for position switches. 

NOTE : For the purposes of this Standard, a "position sensor", a "position 
detector" and a "position switch" are considered to be the same type of 
device. 

6.2 Interlocking devices incorporating mechanically actuated position 

switches 

6.2.1 Interlocking devices incorporating one single mechanically actuated 
position switch 

6.2.1.1 The position switch shall be actuated in the positive mode (see 4.5 of JIS B 
9700-2:2004 and also 3.6 and 5.1 of this Standard). 

6.2.1.2 The break contact of the position switch shall be of the "positive opening 
operation" type, in accordance with Annex K of JIS C 8201-5-1:1999 (see also 3.7 of 
this Standard). 

See examples in Annexes A and B. 

6.2.2 Interlocking devices incorporating two mechanically actuated posi- 
tion switches 

The position detectors should operate in opposite modes : 
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- one with a normally closed contact (break contact), actuated by the guard in the 
positive mode (see 4,5 of JIS B 9700-2:2004 and also BM and 5,1 of this Standard); 

~ the other with a normally open contact (make contact), actuated by the guard in 
the non-positive mode (see 5.1 of this Standard). 

See example in Annex G. 

NOTE : This is a common practice. It does not exclude, w^hen justified, the use 
of two switches actuated in the positive mode, 

6,3 Interlocking devices incorporating non-mechanicaliy actuated position 
switches (proximity switches and magnetic switches) 

An interlocking device incorporating non-mechanically actuated position switches 
can be used, as shown in figure 6 and in Annexes J and K, to overcome problems 
arising from the use of mechanically operated switches when a guard can be removed 
completely from a machine and/or when the environmental conditions require a sealed 
switch (or sealed switches). 

6.3.1 Equivalence with mechanically actuated position switches 

When non-mechanically actuated position switches are used, the safety achieved 
shall not be less than that obtainable with mechanically actuated position switches. 

Equivalent safety may be achieved for instance by: 

- minimizing the possibility of defeat (see 5.7,3); 

- using the techniques described in 4,11 of JIS B 9700-2:2004, especially duplication 
(or redundancy) and automatic monitoring, as well as diversity of design and/or 
technology to avoid common-cause [common-mode] failure. 

6«3,2 Immunity from disturbance 

Proximity switches and magnetic switches for interlocking applications shall be 
selected and used so that foreseeable external fields do not impair their function. 

6.3.3 Mutual influencing 

Proximity switches shall be mounted so that malfunction caused by mutual influ- 
ence is prevented. 

6.3.4 Electrical operating conditions 

When proximity switches and magnetic switches are used in interlocking devices, 
necessary precautions shall be taken to prevent malfunction caused by voltage fluc- 
tuations, transient overvoltage, etc. 

6t3.5 Specific provisions for magnetic switches 

Magnetic switches used without additional measures, such as overcurrent protec- 
tion and/or redundancy and automatic monitoring, are general!}^ not suitable for 
interlocking applications, principally because they can fail to danger. 

Malfunction by vibration shall be prevented (see 5,7.3 and Annex J). 



7 Selection of an interlocking device 
7.1 General 
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The aim of this clause is to advise machine designers and type C standard makers 
on how to select an interlocking device suitable for a specific application in accor- 
dance with 7.2 to 7.6. 

In selecting an interlocking device for a machine, it is necessary to consider all 
phases of the interlocking device life cycle. 

The most important selection criteria are : 

- the conditions of use and the intended use (see 3.22 of JIS B 9700-1:2004 and 7.2); 

- the hazards present at the machine (see clause 4 of JIS B 9700-1:2004 and 7,3); 
~ the severity of the possible injury (see 7.3); 

- the probability of failure of the interlocking device (see 7.3); 

- stopping time and access time considerations (see 7.4); 
~ the frequency of access (see 7.5 and 7.3); 

- the duration of personnel exposure to the hazard(s) (see 7.3); 

- performance considerations (see 7,6). 

7.2 Conditions of use and intended use 

All types of interlocking device technologies shall be considered to ensure that the 
type of device selected is suitable for the conditions of use (e.g. environment, hy- 
giene) and for the intended use of the machine. 

7.3 Risk assessment 

In order to select the most appropriate interlocking device for a given machine in 
definite conditions of use, the designer shall carry out the risk assessment process 
(as described in JIS B 9702), taking into account different types of interlocking 
device until adequate safety is achieved. 

The risk to be assessed in that risk which would occur if the safety function of the 
interlocking device were not performed. 

7.4 Stopping time and access time 

An interlocking device with guard locking shall be used when the stopping time 
(see definition in 3.8) is greater than the time (called access time, see 3.9) taken bj^ 
a person to reach the danger zone. 

7.5 Frequency of access (frequency of opening the guard for access to the 
danger zone) 

7.5.1 For applications requiring frequent access, the interlocking device shall be 
chosen to provide the least possible hindrance to the operation of the guard (taking 
into account the requirements of 7.2, 7.3 and 7.4). 

NOTE : A clear distinction should be made betw^een the following: 

- the concept of frequent access required by the normal operation of 
the machine, as e.g. once per cycle to feed raw products to the ma 
chine and remove finished products; 

- the concept of occasional access, e.g. to carry out adjustment or main- 
tenance interventions, or for random corrective actions in danger 
zones. 
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Each of these concepts is associated with an order of magnitude differing greatly 
as to the frequency of human intervention in the danger zone (for example one 
hundred times per hour in the case of one access per cycle, and several times per day 
in the case of occasional access for adjustment or maintenance during an automatic 
production process). 

7.5.2 For applications using interlocking devices with automatic monitoring, a func- 
tional test (see 9.4,2,4 of JIS B 9960-1:1999) can be carried out every time the 
device changes its state, i.e. at ever}' access. If, in such a case, there is only infre- 
quent access, the interlocking device should be used with additional measures such 
as conditional guard unlocking [see figure 3 b) 2)], as between consecutive functional 
tests the probability of occurrence of an undetected fault is increased. 

7.0 Performance considerations 

Control interlocking devices are safety-related parts of the control system of a 
machine (see JIS B 9705-1). It is therefore essential that a control interlocking 
device is compatible with the machine control system, to ensure that the required 
safety performance, which can be specified in the relevant type C standard, is achieved. 

If power interlocking is used, the components shall have the suitable breaking 
capacity, taking into account all foreseeable situations (e.g. overload). 
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Annex A 
(informative) 

Guard-operated interlocking device with 
one cam^operated position detector 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 

A.l Pinciple 

One single detector, actuated in the positive mode, monitors the position of the 
guard (see 5.1, figure A.l and figure A.2). 



Close 




Open 



Open ^^ 



^ 



-^ Close 



JX 






Fi^re A.l With a rotating guard Figure A.2 With a slidiBg guard 



A.2 Advantages 

* Positive mechanical action of the cam (A) on the actuator (B) of the position 
detector (C). 

* Impossible to defeat by manually operating the actuator without moving cam or 
detector. 



A.3 Disadvantage 

« Fails to danger in case of: 

- wear, breakage, etc. causing malfunction of the actuator; 

- maladjustment between the detector and the cam. 
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A.4 Remarks 

® As the absence of the guard is not detected, it is essential that the guard cannot 
be dismantled without tools. 

® See also: 

- 5.2 Arrangement and fastening of position detectors; 

- 5.3 Arrangement and fastening of cams. 



Example : Electrical interlocking device incorporating one cam-operated 
switch (see 6.2.1 and figure A.3) 

Advantages 

® Positive mechanical action of the guard on the actuator of the switch. 

® Positive opening operation of the break contact of the switch (see 3.7). 

Disadvantage 

* Fails to danger in case of: 

- failure of the mechanical link betw^een guard and switch; 

- electrical by-passing of the switch. 



Guard open 



©^ 



Signal processing 



Guard closed 







Positive opening operation in accordance with 
lEC 60617-7:07-01-09 (see Annex P) 



Figure A.3 Schematic 
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Annex B 
(infoFmative) 

Guard-operated interlocking device w^ith 
tongue-operated switch 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



B.l Principle 

The device comprises: 

- a circuit-breaking element (D); 

- a mechanism which, when operated, causes the circuit-breaking element to be 
opened and closed (for electrical devices: positive opening operation; see 3*7). 

A specially shaped part (tongue) is fixed on the guard (e.g. riveted) so that this 
tongue cannot be easily removed. 

The circuit-breaking element only ensures the continuity of the circuit when the 
tongue is inserted into the detector. 

When the tongue is withdrawn (when opening the guard), it operates in the posi- 
tive mode the mechanism which opens the circuit-breaking element. See figure B.l. 



B.2 Advantages 

• Only a small displacement of the guard is needed for the detector to change its 
state. 

• Especially suitable for use: 

- on the opening edge of a guard (door); 

- with guards which can be removed without the use of tools; 

- with guards having neither a hinge nor a guide connecting them to the machine. 

B.3 Disadvantage 

• Can be defeated by using a tongue which is not attached to the guard. 

B.4 Remark 

For measures against defeat, see 5.7.2,2. 
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Guard 
Open Closed 




- Tongue 



Figure B,l Device with tongue-operated switch 
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Annex C 
(informative) 

Direct (ineehanical) interlocking between 
guard and start/stop manual control 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



C*l Pinciple 

As long as the "start/stop" manual control (in this case a lever) is in the raised 
position, it prevents the guard being opened. Lowering the lever causes the device it 
actuates to positively interrupt circuit continuity (thus directly interrupting power 
to the actuator(s) if the device is part of the power circuit, or generating a stop 
command if it is a control device). When the lever is in the lower position, it is 
possible to open the guard. As long as the guard is open, it prevents the lever being 
lifted. See figure C.l and figure C.2. 




1 Lever 

"Start/stop"' lever prevents the guard 

being opened 
3 Mechanical stopper 

Figure C.l Guard closed 




Key: 

1 Lever 

2 To close 

Guard prevents lifting "start/stop" lever, thus 
preventing restoration of circuit continuity 

Figure C,2 Guard open 



C,2 Advantage 

• Reliability through simplicity^ especially when used avS a power interlocking device 
(see 4.1.2). 



C,3 Remark 

• The lever (or its equivalent) is designed to withstand the expected forces and 
cannot be easily dismantled. A mechanical stop prevents overtravel of the guard. 



PROTECTED BY COPYRIGHT 



24 

B 9710 : 2006 (ISO 14119 : 1998) 



Annex D 
(informative) 

Captive-key interlocking device 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



D,l Description 

A combination of a switch and a lock is secured to a fixed part of the machine. 
The operating key is held captive on the moving part of the guard. 



Dc2 Principle 

The operating principle of captive-key interlocking devices is described by the 
sequence of operations for guard opening: 

a) turn handle to switch off (stop command is given) 

b) further turn to unlock guard; 

c) open guard (key disengages from lock). 
See figure D.l. 





Key: 

1 Lock and switch 

2 Switch 

3 Lock 

4 Handle containing key 

Figure D.l Captive-key interlocking device 
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D.3 Advantages 

* Ensures that the circuit-breaking element will be opened before the guard can be 
opened. 

® Especially suitable when the guard is hinged or can be removed completely. 

D.4 Remarks 

® Can be combined with a time-delay unit. Thus, it becomes an interlocking device 
with guard locking with conditional unlocking [as described in figure 3 b2)]. 

® Alignment of the key and lock can be aided by providing a location pin or pins 
which engage in bushes prior to the key entering the lock. 
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Annex E 
(informative) 

Trapped«key interlocking device 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



E.l Pinciple 

A trapped-key interlocking device is an interlocking device relying upon the trans- 
fer of keys between a control element and a lock fixed on the guard (guard lock). 

In a trapped-key interlocking device, the guard lock and the switching element, 
which also incorporates a lock, are separate as opposed to being combined into a 
single unit as in the captive key interlocking device. 

The essential feature of the system is that the removable key is trapped either in 
the guard lock, or in the switch lock. The lock on the guard is arranged so that the 
key can be released only when the guard has been closed and locked. This allows 
transfer of the key from the guard to the switch lock. Closing the switch traps the 
key, so that it cannot be removed while the switch is in the ON position. See figure 
E.l. 

If there is more than one source of power, and therefore more than one circuit- 
breaking element to be actuated, then a key-exchange box (D) is necessary, to which 
all keys have to be transferred and locked in before the access key, which is of a 
different configuration, can be released for transfer to the guard lock. Where there 
is more than one guard, the exchange box will accommodate an equivalent number of 
access keys. 

Where, for the purpose of the process or of safety, a number of operations have to 
be carried out in a definite sequence, then the transferable key is locked in and 
exchanged for a different one at each stage. The exchange box can be integral with 
the lock. See figure E.2. 



E,2 Advantages 

* No reduction of integrity due to the distance between guard and control system. 
® No need for electrical wiring to each guard. 

* Suitable when the guard is placed in hostile environment. 

* Can be used when the guard can be removed completely. 

* Particularly suitable when several different types of power source are present on 
the machine and for power interlocking. 

* Personal keys can be released for access to guarded areas where persons could 
become enclosed. 
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Key: 

1 Control element 

2 Guard 



Figure E.l Basic diagram 




A (Ai, Ao, A3) Lock(s) on guard(s) 

B Lock on circuit-breaking element 

X,XZ Keys 

O Lock without a key trapped in it 

Lock with a key trapped in it 

NOTE ^^ A key-exchange box is required when either a guard is interlocked with 
two or more machine controls, or two or more guards are interlocked with 
one machine control. 

Figure E,2 Variant with time-delay device (C) 
and key-exchange box^^ (D) 



E,3 Disadvantages 

® Not suitable for applications requiring very fast access times. 
« Duplicate keys can become available for defeating (see 5.7.1), 

E,4 Remark 

• Delay between opening of the circuit-breaking element and unlocking of the 
guards is ensured merely by key-transfer time (increased, if necessary, by a time- 
delay device). 
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Annex F 
(informative) 

Plug and socket interlockiiig device 
(plug/socket combination) 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



F*l Prineipie 

Circuit breaking by unplugging. 

A plug and a socket (or base) are used as an interlocking device, one part mounted 
on the machine, the other part on the guard. See figure F.l and figure P. 2, 

F*2 Advantage 

Reliability through simplicity. 

F,3 Disadvantage 

Generally not suitable for applications requiring very frequent access. 
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Key: 

1 Fixed guard 

2 Movable g'uard 

3 Shortest possible cable 

4 Chain 

5 Fixed guard 



6 Multi-pin iixed connector 

7 Toolproof base (spot-welded nuts or screws) 

8 Ring circuit 

9 Multi-pin removable connector 



NOTE : Pins and sockets are accessible when the plug is removed from the 
socket. It is then easy to complete the circuit using electric lead(s) 
when the guard is open. A possible measure to prevent this method 
of defeat is by the use of a multi-pin connector. Since the wiring 
arrangement is complex, it is more difficult to restore the continuity 
of the circuit when the guard is open. 

Figure F,l Variant a) hinged (rotating) guard 
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Open 



Ring circuit 




— Guard 



NOTE 1 Both pins of the plug are linked to ensure that, when the guard is 
closed and the plug inserted into the socket, the circuit is complete. 

NOTE 2 As the plug remains fixed to the guard and the guard covers the 
socket when open, it is not possible to restore the integrity of the 
circuit by inserting a bridging link into the socket. 

Figure F.2 Variant b) laterally sliding guard 
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Annex G 
(informative) 

Giiard-operated interlocking device incorporating 
two cam^operated position detectors 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



G.l Pinciple 

One detector is actuated in the positive mode. The other one is actiiated in the 
non-positive mode (see 5.1 and figure G.l). 

G.2 Advantages 

® Duplication of detectors avoids failure to danger in case of a single fault. 

« Diversification of redundant components reduces the risk of common-cause failure, 

® The non-positively actuated detector detects the absence of the guard. 

G.3 Remark 

• Without monitoring, one faulty detector remains undetected, until a fault in the 
second detector results in failure to danger. 



PROTECTED BY COPYRIGHT 



32 

B 9710 : 2006 (ISO 14119 : 1998) 




Figure G.l Interlocking device incorporating position detectors 
in the positive mode and in the non-positive mode 



Example : Electrical interlocking device with two cam-operated switches (see 
6.2.2 and figure G.2) 



Guard open 




Guard closed 



Signal processing' including 
(possibly) automatic monitoring 







Positive opening operation in accordance with 
lEC 60617-7:07-07-09 (see Annex P) 



Figure G.2 Electrical interlocking device with 
two cam-operated switches 
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Annex H 
(mformative) 

Mechanical interlocking between 
a guard and a movable element 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



H.l Pinciple 

Direct mechanical interlocking between a guard and a hazardous movable element 
(see figure H.l and figure H,2). 

The function ensured is that of an interlocking guard with guard locking. 




Key: 

1 Guard closed 

2 Movable element free 

As long as the movable element is not at rest, 
the guard is locked in the closed position. 

Figure H^l Guard closed 




Key: 

1 Guard open 

2 Movable element blocked 

As soon as the guard is no longer in the closed 
position, the movable element is blocked. 

Figure H.2 Guard open 



H.2 Remarks 

® The application is limited to very simple mechanisms. 

• Manual positioning of the movable part may be required to make it possible to 
open the guard. 
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Annex J 
(informative) 

Electrical interlocking device incorporating 
magnetically actuated (magnetic) switches 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



J.l Principle 

A coded magnet, fitted to the guards actuates a normally open and a normally 
closed Reed switch. See figure J.l. 



J.2 Advantages 

® Compact; no external moving parts. 
® High resistance to dust, liquids. 
® Easily kept clean. 

J.3 Disadvantages 

* Sensitive to electromagnetic interference. 

® No positive opening of contacts. 

® Possible contact welding in case of overcurrent. 



Guard open 



,^ Coded 
magnet 



I 




T 



7 



Guard closed 



Signal processing 
(including automatic monitoring) 



Figure J.l Electrical interlocking device incorporating 
magnetically actuated switches 
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J, 4 Remarks 



The disadvantages quoted above make it necessary for the magnetic switches to be 
automatically checked at each switching cycle, and for overcurrent protection to be 
provided (see 6.3.5). 

The device is designed so as to require a coded magnet in order to be actuated. 
This prevents it being defeated in a simple manner. 
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Annex K 
(informative) 

Electrical interlocking device incorporating 
two proximity detectors 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



K.l Pinciple 

Di and D2 are proximity detectors, able to detect metal parts (in this case, the 
guard) (see figure K,l). 



Guard open 




Guard closed 



,<^----f 



o 



A 



Signal processing 
including automatic 
raomtoring 



Figure K.l Electrical interlocking device incorporating 

two proximity detectors 



K*2 Advantages 

* No moving parts. 

* High resistance to dust, liquids. 

* Easily kept clean, 

* Compact. 
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K*3 Disadvantages 

® Sensitive to electrical interference. 

® No positive opening operation of contacts. 

® Possibility of contact welding causing failure to danger if no overcurrent protection 
is ensured, 

K.4 Remarks 

® As long as it is open, the guard conceals Dj, thus preventing defeat of this detector 
by simple means. 

® It can, be of advantage to have, in the interlocking device, two switches with 
substantially different technological properties, so that it would be highly improbable 
that the same spurious phenomenon can affect them simultaneously (this is 
known as diversity or heterogeneous redundancy and is intended to prevent 
"common cause failures"). 
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Annex L 
(informative) 

PneuHiatic/hydraiilic interlocking devices 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 

Examples of constructions using one and two devices are shown (see figure L.l 
and figure L.2). 



Closed 




Open 



Figure L,l One single circuit-breaking element (valve) 

with positive-mode actuation of the single 

valve by the guard 



Closed 




Open 



Figure L.2 Two circuit-breaking elements (valves) 
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B^ 




^A 



Key: 

1 Guard open 

2 To machine actuators 

3 Guard closed 

Two independent interlocking devices (A and B) are provided; 
A acts on the electrical control circuit (with automatic monitoring); 
B acts on the hydraulic circuit (power interlocking - see 4.1,2 - 
when direct interruption of the power circuit is possible). 

Figure L,3 Hybrid (electrical and hydraulic) interlocking device 



L.l Remark 

A hybrid interlocking device is particularly interesting in very severe environmen- 
tal conditions which may induce "common mode failures" (i.e. simultaneous failures 
having the same cause) of components with the same technology, e.g. melting of the 
insulating layer of conductors on a machine working under hot conditions, or simul- 
taneous failure of two proximity detectors under the effect of electric or electromag- 
netic interference. 
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Annex M 
(informative) 



Interlocking device with spring-applied/ 
power-released guard locking device 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



M,l Variant A; Interlocking function ensured by detecting separately guard 
position and lock position 

Principle 

Ci detects the position of the guard. C2 detects the position of the lock (see figure 
M.l)„ 

Release of the lock when the hazard has disappeared can be controlled either by a 
timing device (timer) or by a stop-detection device. 



Open 



Y77777/77A 








Closed 



mzzzzzm 



Ci and C2 may be detectors of any technological type (see 4.3) 
Figure M.l Separate detection of guard position 



M,2 Variant B: Interlocking function ensured by detecting lock position 
only 

Principle 

In detecting the lock position, one single detector (C) also monitors the guard 
position, provided that the condition "C cannot close if the guard is not closed" is 
rigorously and reliably performed due to good design and construction of the ''guard- 
lock-contact (C)" assembly (see figure M.2). 
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Release of the lock when the hazard has disappeared can be controlled either by a 
timing device [timer] or by a stop -detection device. 



Open V77777777A 



yTTTTTTTTA 



gg^mm^ 








U227ZZZZZA 



C may be a detector of any technological type (see 4,3). 
Figure M.2 Integrated detection of guard position 

M.3 Remark (valid for both variants) 

Whatever device (electromagnet, cylinder, etc.) is used to actuate the lock which 
keeps the guard closed, it is essential that fail-safe conditions be established; i.e. 
that, if power supply is cut, the lock remains in the position in which it renders the 
guard immobile. 
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Annex N 
(informative) 

Interlocking device with guard locking^ 
with manually operated delay device 



This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 



N.l Principle 

The threaded pin is turned by hand [unconditional unlocking, according to figure 
3 b) 1)]. The time elapsing between the switch opening and guard release is deter- 
mined so that it is longer than the time taken to stop the hazardous functions. 

When opened, the guard prevents the pin being screwed in again, thus ck>sing the 
switch contacts. 

See figure N.l. 



N.2 Advantage 

Reliability through simplicity. 




Open 



Key: 

1 Guard open 

2 Position detector 

Figure N.l Interlocking device with guard locking, 

with manually operated delay device 
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Annex P 
(informative) 
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This Annex (informative) is to supplement the matters related to the text and not 
to constitute the provisions of this Standard. 
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